FP
Vendor
Forestblog Project
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-3005 | FO Forestblog Forestblog Project | 5.4 | Mar 31 | Sayski ForestBlog Friend Link cross site scripting |
| CVE-2025-3004 | FO Forestblog Forestblog Project | 5.4 | Mar 31 | Sayski ForestBlog search cross site scripting |
| CVE-2024-57498 | FO Forestblog Forestblog Project | 4.8 | Feb 3 | Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function |
| CVE-2023-6887 | FO Forestblog Forestblog Project | 9.8 | Dec 17 | A vulnerability classified as critical has been found in saysky ForestBlog up to 20220630 |
| CVE-2022-29020 | FO Forestblog Forestblog Project | 6.1 | Apr 16 | ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar |
| CVE-2021-46034 | FO Forestblog Forestblog Project | 6.1 | Jan 25 | A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box |
| CVE-2021-46033 | FO Forestblog Forestblog Project | 9.8 | Jan 25 | In ForestBlog, as of 2021-12-28, File upload can bypass verification |
| CVE-2020-18964 | FO Forestblog Forestblog Project | 8.8 | May 11 | Cross Site Request Forgery (CSRF) Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges |